Fixes for upload permissions

This takes care of permissions for seeing the upload button.